Malicious file upload using double extensions

Question

It was observed that My application allows uploading files with double extensions (e.g., file.php.txt) and JSON files and multimedia files without proper validation, potentially bypassing security controls and leading to security risks. please Specify this problem and give me a proper solution

My manager Ask Me to Fix The problems i Don't know What to do